Principal Security Engineer

<div class="content-intro"><p><span style="font-family: helvetica, arial, sans-serif;"><strong><span style="font-size: 14pt;">About Us</span></strong></span></p> <p><span style="font-family: helvetica, arial, sans-serif;">DriveWealth is on a mission to make investing easier. We believe that everyone should have the ability to control their financial future, and that access to financial markets should not be limited by geography, wealth, or legacy systems. We are a global B2B financial technology organization dedicated to democratizing access to financial independence around the world. Our mission is realized through an API-based platform, empowering our partners to offer seamless investing and trading experiences to clients worldwide, all from their mobile devices. Our technology provides partners with a modern, extensible toolkit, enabling traditional investment workflows and innovative techniques like fractional share ownership. DriveWealth has evolved into a global platform offering trading of US equities, mutual funds, ETFs, fixed income, and options.</span></p> <p><span style="font-family: helvetica, arial, sans-serif;">There’s never been a better time to build a category-defining business and there has rarely been a team better positioned for this opportunity. Our culture blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street. We encourage creativity and experimentation while ensuring institutional-grade execution and regulatory compliance in everything we do. Join us and help build the future of global investing!</span></p></div><h3><span style="font-family: helvetica, arial, sans-serif;"><strong>About the Role</strong></span></h3> <p><span style="font-family: helvetica, arial, sans-serif;">DriveWealth LLC is seeking a highly motivated and experienced Principal Security Engineer to design, build, and mature security capabilities across our brokerage platform and corporate environment. Reporting to the Head of Security Engineering, you will serve as a senior technical leader, own complex engineering initiatives, and shape the architecture and implementation of controls that support the firm’s growth, protect client and consumer data, and meet or exceed regulatory obligations.<br><br></span><span style="font-family: helvetica, arial, sans-serif;">In this hands-on role, you will secure our AWS platform, Kubernetes services, low-latency trading infrastructure, and corporate technology. We are seeking an engineer who combines architectural judgment with strong implementation skills to deliver scalable security solutions through software and automation. You will also build and maintain the platforms and services used by Security Operations, provide security consulting to business leaders and other engineers, and partner with Engineering, IT, Risk, and Compliance within an innovative and entrepreneurial culture.<br><br></span></p> <h3><span style="font-family: helvetica, arial, sans-serif;"><strong>What You’ll Do</strong></span></h3> <p><strong>Security Architecture & Technical Leadership</strong></p> <ul> <li><strong>Architecture Standards:</strong> Design and assist in the implementation of reusable security patterns and automated guardrails across product and corporate systems.</li> <li><strong>Engineering Delivery:</strong> Own complex initiatives from design and testing through deployment and ongoing maintenance, combining vendor solutions, custom software, infrastructure as code, and measurable control improvements.</li> <li><strong>Technical Leadership: </strong>Mentor engineers, conduct design and code reviews, and document architectures and runbooks. Influence technical decisions across Engineering and IT while balancing security, reliability, and delivery.</li> </ul> <p><strong>Product & Corporate Security</strong></p> <ul> <li><strong>Cloud & Network Security:</strong> Engineer least privilege, workload identity, segmentation, encryption, and secure data access across AWS, EKS, EC2, DynamoDB, and colocated infrastructure, accounting for availability and trading latency.</li> <li><strong>Endpoint & Identity: </strong>Harden Windows and macOS, tune endpoint protection, and automate Okta and JumpCloud identity and device controls. Strengthen privileged access, phishing-resistant authentication, and secure configurations for Slack and other SaaS applications.</li> <li><strong>Application & Container Security:</strong> Embed threat modeling, API security, security testing, image<br>signing, policy enforcement, and runtime protections into development, CI/CD, and GitOps workflows.</li> <li><strong>Exposure Management:</strong> Automate code, dependency, container, and infrastructure scanning. Partner with Engineering and IT to prioritize remediation, verify fixes, and prevent recurring vulnerabilities.</li> </ul> <p><strong>Security Operations Engineering</strong></p> <ul> <li><strong>Security Platforms: </strong>Build, integrate, and maintain SIEM, SOAR, endpoint security, and vulnerability management services, including provisioning, monitoring, and documented maintenance and support procedures.</li> <li><strong>Detection & Automation:</strong> Engineer telemetry collection, normalization, and enrichment. Partner with Security & Threat Operations to develop and validate analytics